EP1340201A1

EP1340201A1 - Hsm-key and hsm-adapter (external + internal)

Info

Publication number: EP1340201A1
Application number: EP00916817A
Authority: EP
Inventors: Reno Byckiewicz
Original assignee: Individual
Current assignee: Individual
Priority date: 2000-03-25
Filing date: 2000-03-25
Publication date: 2003-09-03
Also published as: WO2003010723A1; AU2000280404A1; JP2004521432A

Abstract

Until now, digital data have been stored in a manufacturer-specific data and recording format on storage media. These formats cannot be used by the user. All of these inventions are based on enabling everyone who is informed of the data format and of the recording protocol of the respective manufacturer to be able to clearly identify and read out the useful data on all structurally identical storage media. The advantages that can be obtained with the HSM key consist of the fact that the data format, the recording format and all signal levels can be individually parameterized by the user. Other individuals who are not informed of these storage parameters receive, in the event of an unauthorized access, only a series of different signal levels out of which the actual useful data are not to be filtered. An HSM key can, with the aid of different adapters, be used in any system and under all platforms that are capable of transmitting and receiving data in any form.

Description

description

HSM - KEY and HSM - adapter (external + internal)

Digital data can be stored on different media e.g. B. for a transport or just for data backup. Depending on the manufacturer of the storage medium and / or the read / write unit, a fixed, predetermined data format and / or recording protocol that cannot be changed by the user is used for this purpose.

The inventions underlying claim 1 are based on the problem that everyone who is informed about the data format and the recording protocol of the manufacturer can read out and evaluate all user data from all users. Even if the user tries to protect this data using an encryption algorithm, an unauthorized person can still at least clearly separate the primary user data from the secondary protocol data when reading the storage media, which are only necessary for storing user data on the respective data carrier. The user data determined in this way can then be e.g. a decoding algorithm can be applied.

This problem is solved by the features of the free parameterization of all recording parameters and the freely parameterizable data format listed in claim 2.

The advantages achieved by the invention are, in particular, that instead of a fixedly specified data and / or recording format on the internal or external HSM key with the help of the internal or external HSM adapter, individually parameterizable and freely definable recording and data formats are used by the user can. While in inventions according to claim 1 mostly two different signal levels and a continuous and fixed predetermined synchronization signal are used to store the data, in the invention according to claim 2 any number of signal levels can be used in parallel and stored on the HSM key. It is also possible to change the data format or the recording format at any time during data storage or to save completely useless information in between. A second person who does not have the data format and the recording log is informed, only gets a certain number of different signal levels for unauthorized access. From these levels, it is not possible to see what proportion, for example, user data information is or what synchronization signals are. A crypton-analytical evaluation of the user data is prevented from the start, since it cannot be determined. Since the storage of the data in the HSM key is an analog process, an HSM key created with an HSM adapter can be used with any system and under any platform, provided that they are able to store data in any form send and receive. The HSM key can be removed from the HSM adapter and taken with you after data has been saved or after a reading process. The data are stored in a non-volatile memory and are therefore not dependent on any further energy supply.

An advantageous embodiment of the invention is specified in claim 2. The development according to claim 2 makes it possible to combine different types of data, possibly with different recording parameters, on a data carrier. This enables the HSM key to e.g. For this purpose, various information, which is accommodated on various systems according to the current state of the art, is combined on a storage medium. An HSM key could e.g. can be used as a complete replacement for the following systems or parts thereof:

- EC card replacement

- Visa card replacement

- Mastercard replacement

- Eurocard replacement

- American Express card replacement

- Telephone card replacement

- Replacement of all other payment, credit or bank cards

- Car radio activation card (e.g. keycards)

- Hardware or software dongle replacement

- Health insurance card replacement

- Opener for door locking systems (also several at the same time - private home, car, company) - Working time recording system (replacement of stamp cards)

- Any other media that are used to store data and / or to identify the user in any form.

In addition to the HSM key, the access authorization is the data format and recording system known only to the user. Various passwords of any length can also be used to access the various functions. The passwords can also be set by the user and not only by the card issuer and can be freely changed at any time. The advantages of replacing some of the above examples with the HSM key are described in more detail below:

EC card replacement

Current status:

With the help of e.g. User information can be stored on EC cards or similar magnetic strips attached to media in order to e.g. enable the withdrawal of money from the EC machine or make it easier for doctors to collect customer data as a substitute for health vouchers.

Disadvantage of these EC cards:

- low information density per card

- Each institution has its own card. This has the disadvantage for the customer that he has to carry around many of these cards with him.

- Most cards always have the same customer information: last name, first name, birthday and place of residence, ... and only a small amount of information that is required for the specific institution, e.g. the bank details.

- Since the information is always stored on this card in the same data format, such a card can be easily read by unauthorized persons and even copied and used.

- e.g. For EC cards, the customer is given a password by the bank. This password cannot be changed by the customer, it always has 4 digits and consists only of digits.

- The fact that either the password itself is in encrypted form on the EC card or that it can somehow be determined from the information on the card has already been proven many times, although not officially confirmed.

- Each card can only fulfill one task.

- The magnetic stripe on the card can scratch or scratch, which makes it impossible to use the card again.

- The card can e.g. crease, which would also destroy it.

- If the customer changes the bank or the account or changes his credit limit, at least a new card is due. - If the customer changes his name, for example, at marriage, all cards must be replaced.

- It is not possible for the user to have their own, individual data such as saves the current account balance or an address or telephone list on the card.

- In the event of problems with the magnetic stripe cards, one is dependent on the opening times of the institutions and, if necessary, their delivery times for new cards.

Advantages of the HSM key compared to the conventional EC card:

- higher information density of the HSM key

- There may be a master area in the HSM key in which the customer-specific data is stored. And besides, any number of sub-areas in which the additional information for individual tasks or institutions.

- You only have to carry a single HSM key instead of many EC or similar cards.

- Several different pieces of information can be stored on the HSM key. This means that other activities can also be carried out with a single HSM card.

- The user himself can assign any number and any length of password from any characters or symbols. The user himself determines which passwords are intended for which information on the card. For example, Hessen also set up areas that are only accessible with several passwords to be entered one after the other.

- The user himself can determine which information on the card should be passed on to which institutions.

- The user can determine in which data format and or in which recording format the data should be saved on the card. The location on the map can also be freely determined. For example, emergency information (e.g. in the event of an accident, indications of a diabetes or blood group or an emergency telephone number) can be saved in a common, standardized data format and recording format (e.g. binary storage with 8 bits and stop bit and synchronization pulse) Store the password on the key, while high-security information such as account access authorizations can be stored in any data format specified by the user (e.g. trinary storage with 29 bits and various stop bit levels without synchronization pulse) and with an 18-digit password on the HSM key.

- Due to the individual, user-specific recording formats, unauthorized reading of the HSM key contents means that these contents cannot be analyzed or evaluated, because they would first have to be converted into a processable data format.

- Due to its small size and the possible integration into a break and bend-proof housing, the data cannot be lost due to mechanical stress.

- In addition to EC card information, it is also possible to save individual data such as an address or telephone list on the HSM key.

Dongle - replacement

Current state of the art:

Due to the increasing use of electronic media in many areas with very high general and special protection requirements (both under public and private law), data protection methods that have been customary to date appear to be questionable and inadequate. In order to protect high-quality software products against unauthorized copying, so-called hardware or software dongles of various types and techniques are generally used according to the current state of the art. Due to the increasing use of industry-specific software products in both public and private law, new methods of protecting software appear necessary. The protection of self-developed software products is vital for small and medium-sized companies in particular.

There are already various solutions in the software or hardware area or mixed solutions, which are very different in their reliability, handling and combination with other software products.

Disadvantages of so-called dongles:

- One dongle per program is required.

- Only individual programs can be protected, but not the data of the program or the entire PC at once.

- All dongle for a program or at least for a program sub version are the same. Therefore, unauthorized persons have access to the personal data of all users who use this program version when copying or using a single dongle.

- If an unauthorized user is able to copy a dongle or to emulate or simulate it with additional software, this unauthorized person can also access himself or herself or other people Provide program versions and user data of all program versions.

- A dongle uses existing interfaces on the PC and can cause incompatibilities, e.g. if the dongle is installed between the PC and the printer, or if several dongle from different programs have to be plugged into each other.

- The dongle is the only access authorization to the program. For this reason, a dongle must be kept in the safe in the evening to prevent theft.

- As a rule, no user-specific data can be accommodated in the dongle, which enables individual users to be identified.

- Also e.g. For a toilet break, the user must remove and lock the dongle or lock from the computer when handling highly sensitive data or call in a reliable supervisor. To remove a dongle, the computer usually has to be shut down and the dongle unscrewed.

- Different program versions have to be produced for different program purposes. This affects i.a. Program demo versions, limited use of the program or runtime-dependent program versions. A new program version must be created for each of these program sub-versions. Even if the potential customer wants to switch from a demo version to a full program version or only from a program version to an update, it is usually necessary to send a new dongle in addition to a new software CD.

Advantages of the HSM key:

- One HSM key instead of many dongles and passwords

- An HSM key can be easily carried on the keychain. The HSM key is hot-pluggable, which means that it can be removed and plugged in while the computer is running. - The user can also assign any number and any length of password from any characters or symbols. The user himself determines which passwords are intended for which information on the card. For example, areas can be set up that are only accessible with several passwords to be entered one after the other.

- The user himself can determine which information on the card should be necessary for which software program.

- The user can determine in which data format and or in which recording format the data should be saved on the card. In this way, every program user creates his or her individual dongle. It is no longer possible for unauthorized persons to put the program versions of all program users into operation by simply copying them.

- With the help of e.g. of the additional programs HD - Save or SW - Save, it is possible to lock the entire computer including all user data with an HSM key. See also the chapter "Protection and backup of data against unauthorized access with the HSM key".

- Due to its small size and possible integration into a break and bend-proof housing, the data cannot be lost due to mechanical stress.

- When using the HSM key as a dongle replacement, all security gaps are closed that could not be avoided by conventional dongle technology. Incompatibilities between different dongles are eliminated, as are copying options or simulations of dongles, since the user himself determines where and in what form the dongle data sent by the software company is stored on the HSM key.

- With e.g. With a conventional PC, the user can also save any individual data such as address or telephone lists on the HSM key.

- Due to the freely changeable data content of the HSM key, the development of different program versions for different purposes can be omitted. A special data structure in the HSM key makes it possible to make a full version of a program demo version by simply changing the parameters there Change term limits individually. The following options are available with the help of the HSM key when creating software: a) Individual copy protection tailored to the individual user b) Time-limited use defined by start / stop and date / time c) Time-limited use defined by real usage time in hours / Minutes d) Differentiated management of program parts of the relevant software e) Plausibility check of all relevant system and software-specific parameters f) Differentiation of all possible forms of protection violation including fault tolerance g) Update of all parameters listed under a) to f) possible via data medium or remote access. h) Implementation of any other parameters that depend on the respective software or hardware manufacturer.

Protection and backup of data against unauthorized access with the HSM key:

It is known that due to the increasing use of electronic media in many areas with very high general and special protection requirements, both under public and private law, the previously common methods of data protection appear to be questionable and inadequate.

Current state of the art and disadvantages of this method:

Permanently installed local or network storage media are protected in the best case by a BIOS / network password of the system. Exchangeable storage media can be kept at least in the safe. In both cases, however, the following applies: in the event of theft, the stored information is available almost without any obstacle, since the data and recording format are fixed by the manufacturer of the storage medium and thus the primary user data are unambiguous on the storage media to be distinguished from the secondary auxiliary data such as synchronization data or correction data. For example, today it is quite possible for specialist companies to read back the data on them only with the help of the data media installed in hard drives. In some cases, it is even possible to read out the data in hard drive areas already deleted by the user.

Advantages of using the HSM key to protect user-specific data:

The advantages achieved with the invention are, in particular, that the HSM key, in cooperation with the additional software HD-Save or SW-Save, protects locally working storage media with RVW status, which can work under different operating systems, against unauthorized access. The storage medium is made unusable for unauthorized persons. Only a limited number of people can use the HSM key to make the storage medium usable again. In the event of theft or unauthorized access, the storage medium appears to be non-existent or unusable.

The mode of operation is described in more detail below:

The backup is e.g. started with the HD - Save software, specifying the medium to be backed up (e.g. drive C:) and options. Possible options are (one each):

- The backup is carried out by writing the selected areas of the storage medium to the backup diskette and deleting the selected areas on the storage medium.

- Restoring selected areas to the storage medium makes them reusable. The time required for maximum backup is less than 1 min. / 1GB

Use of the HSM key as a locking system

To different people e.g. To grant or deny access to different areas of a company, mechanical locking systems are still widely used today, although there are keys in different hierarchies. For example:

- 1 general master key for all doors in the company with all branch offices

- Various general keys for all doors in an outsourced operating section

- Various master keys for individual departments in an outsourced operating part

- Various keys for individual doors or door combinations in these departments

better locking systems today use a technology that is comparable to an EC card. However, the same disadvantages and restrictions apply that were already explained in the chapter "EC card replacement".

Disadvantages of these mechanical access restrictions:

- A high administrative effort for the distribution and maintenance of such a locking system is necessary.

- If people move up or down in the hierarchy, the bowl must be exchanged.

- The locking system must be carefully planned from the start. An interim stay of people in other areas is difficult to implement

- When moving / and expanding individual departments, it may be necessary to replace several locking cylinders

- If a key is lost, the entire locking system may need to be replaced, depending on the order of the keys. - Temporary, eg nocturnal access restrictions for individual people are not possible.

- If the employee leaves the company, one is dependent on the delivery of the key.

- Different locking systems make different keys necessary. Just think of your own house, the company, the car, cleaning companies that look after different companies, owners of several companies, ...

- If a blank is available, any mechanical key can be copied.

- If there is no blank, this can also be produced somehow.

Advantages of the HSM key as a key replacement.

An HSM adapter is installed in each door and either a central computer or the HSM key notes which door can be opened with which HSM key. This has the advantage of a fully configurable locking system:

- Individual access authorizations can be created individually for each person

- No problems with key loss - it is simply deleted from the database

- Several locking systems can be operated with an HSM key on request.

- Elimination of the possibly sizable keychain in your pocket

- Time-dependent access restrictions can be freely defined

- The presence of the key holder and the key is not necessary in the event of any changes

- Due to the individual data and recording format in the HSM key, access to the locking system cannot be made with the help of blanks. - Summary and other options when using the HSM key instead of various other storage media:

- high information density of the HSM key

- There can be a master area in which the customer-specific data such as name and address are located. There can also be any number of sub-areas in which the additional information is for individual tasks or institutions.

- One HSM key instead of many EC-like cards, dongles and keys

- With a single HSM key, e.g. the following activities are carried out:

Withdraw money (EC cards, VISACard, AmericanExpress, Mastercard, etc.)

Open doors (key or code card replacement)

Manage working time account (time clock replacement)

Commissioning of licensed computer programs (dongle replacement)

- The user himself can assign any number and any length of password from any characters or symbols.

- The user himself determines which passwords are intended for which information on the card. For example, also set up areas that are only accessible with several passwords to be entered one after the other.

- The user can determine in which data format and or in which recording format the data should be saved on the card. For example, emergency information (e.g. for a possible accident, indications of a diabetes or blood group or an emergency telephone number) could be stored on the HSM key without a password in a common, standardized data format and recording format (e.g. binary storage with 8 bits and stop bit and synchronization pulse) , while high security information such as account access authorizations in any data format specified by the user (e.g. trinary storage with 29 bits and different stop bit levels without Synchronization pulse) and can be stored on the HSM key with a password.

- Due to the individual, user-specific recording formats, unauthorized reading of the HSM key content means that this content cannot be analyzed or evaluated, because it would first have to be converted into a processable data format.

- Due to its extremely small design and possible integration into a break and bend-proof housing, the data cannot be lost due to mechanical stress.

- With e.g. With a conventional PC it is possible for the user to save any data on the HSM key.

Claims

claims:

1.Save digital data on various media such as:

- Hard disk

- magnetic tape

- diskette

- CD-ROM

- CD-RW

- Optical disk

- and all other read / write media not listed here

characterized,

that the data format and or the recording protocol used is fixed by the manufacturer of the storage media or the read / write unit and cannot be changed by the user. In most cases, the storage media are also tied to a specific platform. For example, a 3.5 "diskette formatted with a Macintosch computer, despite the same design, cannot be easily evaluated in an IBM PC.

2. storing digital data according to claim 1,

characterized,

that both the data format and or the recording protocol can be freely parameterized by the user himself and changed at any time. The analog recording type results in a data recording method that is independent of platform and hardware.